gamph Privacy Policy

1. Introduction

gamph Gaming Corporation ("gamph," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the gamph platform. This Privacy Policy describes how we collect, use, disclose, store, and safeguard your personal information when you access or use our website, mobile platform, and related services (collectively, the "Service").

gamph operates in the Philippines and is subject to the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations. We are registered with the National Privacy Commission (NPC) as a personal information controller. By creating a gamph account or using our Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein.

We take our obligations under the DPA seriously. gamph only collects the personal data it genuinely needs, uses it only for the purposes described in this Policy, and takes reasonable steps to keep it secure. If you have questions about how gamph handles your data, our Data Protection Officer (DPO) is available to assist you — contact details are provided at the end of this Policy.

2. Personal Data We Collect

gamph collects personal data from you in several ways: directly when you register and use our Service, automatically through your use of the platform, and occasionally from third-party sources for verification purposes. The categories of personal data we collect include:

2.1 Registration and Account Data

• Full legal name
• Date of birth (for age verification — you must be 21 or older)
• Email address
• Mobile phone number
• Residential address (including city, province, and postal code)
• Username and encrypted password
• Nationality and country of residence

2.2 Identity Verification Data

To comply with Philippine anti-money laundering (AML) laws and PAGCOR regulatory requirements, gamph is required to verify the identity of all players before processing withdrawals. This may include:

• Government-issued photo identification (passport, driver's license, PhilSys national ID, SSS/GSIS ID, or PRC ID)
• Proof of address (utility bill, bank statement, or barangay certificate dated within three months)
• Selfie or live photo for biometric verification
• Source of funds documentation (for large deposits or withdrawals)

2.3 Financial and Transaction Data

• Payment method details (GCash, PayMaya, bank account numbers for BPI, BDO, Metrobank, etc.)
• Deposit and withdrawal transaction history
• Betting and gaming activity (wagers placed, games played, wins and losses)
• Bonus and promotion participation records
• Account balance and transaction timestamps

2.4 Technical and Usage Data

When you use the gamph platform, we automatically collect certain technical information:

• IP address and geolocation data (to verify you are accessing from a permitted jurisdiction)
• Device type, operating system, and browser type
• Session duration, pages visited, and clickstream data
• Cookies and similar tracking technologies (see Section 6 for details)
• Error logs and diagnostic data

2.5 Communications Data

• Customer support chat transcripts and email correspondence
• Marketing preferences and communication history
• Feedback, survey responses, and reviews

3. How We Use Your Personal Data

gamph uses your personal data only for legitimate purposes related to providing, improving, and securing our Service. Specifically, we use your data to:

Purpose	Description
Account Management	Create and maintain your gamph account, authenticate your identity, and provide customer support.
Transaction Processing	Process deposits, withdrawals, and in-game transactions. Verify payment methods and prevent fraud.
Regulatory Compliance	Comply with Philippine AML laws, PAGCOR regulations, and the Data Privacy Act. Verify age (21+) and identity. Report suspicious activity to authorities when required by law.
Game Provision	Deliver games, track gameplay, calculate winnings, and enforce game rules and Terms & Conditions.
Security & Fraud Prevention	Detect and prevent fraud, money laundering, collusion, bonus abuse, and unauthorized access. Monitor for suspicious activity.
Marketing & Promotions	Send promotional offers, bonuses, and newsletters (only if you have opted in). Personalize your experience based on your preferences.
Platform Improvement	Analyze usage patterns, conduct A/B testing, and improve the gamph platform's performance, features, and user experience.
Responsible Gaming	Implement deposit limits, self-exclusion, and cooling-off periods. Identify and assist players who may be at risk of problem gambling.

gamph does not use your personal data for any purpose other than those listed above without obtaining your explicit consent. We do not sell your personal data to third parties for their own marketing purposes.

4. Legal Basis for Processing Your Data

Under the Data Privacy Act of 2012, gamph must have a lawful basis for processing your personal data. We rely on the following legal grounds:

• Consent: You have given explicit consent for us to process your data for specific purposes (e.g., marketing communications).
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you under the gamph Terms & Conditions (e.g., processing deposits and withdrawals, providing games).
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including AML laws, PAGCOR licensing requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, and platform improvement, provided these interests do not override your fundamental rights and freedoms.

5. Sharing Your Personal Data

gamph does not sell, rent, or trade your personal data to third parties. However, we may share your data with trusted third-party service providers and partners in the following circumstances:

5.1 Service Providers

We engage third-party companies to perform services on our behalf, including:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment gateways to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC (Know Your Customer) providers to verify your identity and comply with AML regulations.
• Game Providers: Licensed software providers who supply the games available on gamph (e.g., slot, live dealer, bingo games).
• Cloud Hosting: Secure cloud infrastructure providers who host the gamph platform and store data.
• Customer Support Tools: Live chat and ticketing systems to provide customer service.
• Marketing Platforms: Email and SMS marketing services (only if you have opted in).

All third-party service providers are contractually bound to protect your data and use it only for the purposes we specify. They are prohibited from using your data for their own purposes.

5.2 Legal and Regulatory Authorities

gamph may disclose your personal data to government authorities, regulators, or law enforcement agencies when required by law, including:

• PAGCOR (Philippine Amusement and Gaming Corporation) for licensing and regulatory compliance
• Anti-Money Laundering Council (AMLC) for suspicious transaction reporting
• Bureau of Internal Revenue (BIR) for tax reporting
• National Privacy Commission (NPC) in response to lawful requests
• Courts and law enforcement in response to valid legal process (subpoenas, court orders, etc.)

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you via email and/or a prominent notice on the gamph platform before your data is transferred and becomes subject to a different privacy policy.

6. Cookies and Tracking Technologies

gamph uses cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you when you return to the platform.

6.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly (e.g., session management, authentication). You cannot opt out of these cookies.
• Performance Cookies: Collect anonymous data about how you use gamph (e.g., pages visited, time spent). Used to improve platform performance.
• Functional Cookies: Remember your preferences (e.g., language, display settings) to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising. You can opt out of these cookies.

6.2 Managing Cookies

You can control and delete cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when a cookie is being sent. However, disabling essential cookies may prevent you from using certain features of the gamph platform. To learn more about managing cookies, visit your browser's help section.

7. Data Retention

gamph retains your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: We retain your data for the duration of your account's active status and for a reasonable period thereafter to comply with legal obligations.
• Closed Accounts: After you close your account, we retain certain data for up to seven (7) years to comply with Philippine AML laws, tax regulations, and PAGCOR record-keeping requirements.
• Marketing Data: If you opt out of marketing communications, we will retain a record of your opt-out preference indefinitely to ensure we do not contact you again.
• Technical Logs: Server logs and technical data are typically retained for 90 days, unless needed for security investigations or legal proceedings.

After the retention period expires, we securely delete or anonymize your personal data so that it can no longer be associated with you.

8. Data Security Measures

gamph takes the security of your personal data seriously. We implement industry-standard technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and gamph servers is encrypted using TLS (Transport Layer Security) protocols. Sensitive data at rest (e.g., passwords, payment details) is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized gamph employees and contractors who need it to perform their duties. All personnel are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): We encourage all players to enable 2FA on their accounts for enhanced security.
• Regular Security Audits: gamph conducts regular security assessments, vulnerability scans, and penetration testing to identify and address potential risks.
• Incident Response: We have a data breach response plan in place. In the event of a breach that poses a risk to your rights and freedoms, we will notify you and the National Privacy Commission within 72 hours as required by the DPA.

While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

9. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data, subject to legal retention requirements.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission if you believe your privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 12. We will respond to your request within thirty (30) days.

10. Protection of Minors

gamph strictly prohibits the use of our Service by anyone under the age of 21. We do not knowingly collect personal data from minors. If we discover that we have inadvertently collected data from a person under 21, we will immediately delete that data and close the associated account.

If you are a parent or guardian and believe your child has provided personal data to gamph, please contact us immediately so we can take appropriate action.

11. Changes to This Privacy Policy

gamph reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you by:

• Posting a notice on the gamph platform
• Updating the "Last Updated" date at the top of this Policy
• Sending an email notification to your registered email address (for significant changes)

Your continued use of the gamph Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how gamph handles your personal data, please contact our Data Protection Officer: